package jdbc;

import java.sql.Connection;
import java.sql.ResultSet;
import java.sql.SQLException;
import java.sql.Statement;
import java.util.Scanner;

public class JDBCDemo6 {
    public static void main(String[] args) {
        System.out.println("欢迎登录");
        Scanner scanner = new Scanner(System.in);
        System.out.println("请输入用户名");
        String username = scanner.nextLine();
        System.out.println("请输入密码");
        String password = scanner.nextLine();

        try (
                Connection connection = DBUtil.getConnection();
        ){
            Statement statement = connection.createStatement();
            /*
                SELECT id,username,password,nickname,age
                FROM userinfo
                WHERE username='aaa' AND password='aaa' OR '1'='1'
             */
            String sql = "SELECT id,username,password,nickname,age " +
                         "FROM userinfo " +
                         "WHERE username='"+username+"' " +
                         "AND password='"+password+"'";
            ResultSet resultSet = statement.executeQuery(sql);
            if (resultSet.next()){
                String nickname = resultSet.getString("nickname");
                System.out.println("登录成功"+","+nickname+"欢迎回来！");
            }else {
                System.out.println("登录失败！用户名或密码错误");
            }
        } catch (SQLException e) {
            e.printStackTrace();
        }
    }
}
